$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft File: Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft (raw, json) Hash identifier: QPntEdVh1SVafSzanaSC6D3WtVmQzDQwPe+q8uFQsfs= Subject key identifier: 10:10:AC:E5:B2:64:F6:9E:24:F5:8A:B0:AE:52:A6:F6:A5:1B:2A:D9 Authority key identifier: 27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 Certificate issuer: /CN=A91D6DBD/serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft Manifest number: 0150 Signing time: Tue 05 Aug 2025 04:42:46 +0000 Manifest this update: Tue 05 Aug 2025 04:42:45 +0000 Manifest next update: Tue 12 Aug 2025 04:42:45 +0000 Files and hashes: 1: Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl (hash: izHK99QW6wFUX5LAbyNJQxLK9ISgMRCJf/qbHSUM6Yw=) 2: 2ADA37E6790F11EE99D7CB43C4F9AE02.roa (hash: qZFxZlK/s9XuD9ZwE9EGQRrcfUALnpisB8t9uJ9BMCk=) 3: 72F76026790A11EE88F94A29C4F9AE02.roa (hash: YumOlFepqCcL4/FMk4aKjlchGI7ETUe9t0yQ6qtDs+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6DBD, serialNumber=272D71AD62645775CCDFBB5770478E5943EA6595 Validity Not Before: Aug 5 04:42:45 2025 GMT Not After : Aug 12 04:42:45 2025 GMT Subject: CN=68918bc5-7bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3c:8c:30:74:97:dd:85:01:40:25:38:c9:95: b7:d8:d5:d0:0b:3c:a3:a2:f8:da:3b:11:e3:01:5b: e1:56:2e:f2:3d:88:8a:f4:a5:77:a2:11:05:69:35: d3:8c:00:62:13:25:d1:24:e1:8a:fe:3e:69:f5:23: 9e:27:d9:e3:13:2c:1c:d5:f7:85:9f:48:19:73:bd: 22:39:db:f9:b3:bc:6c:80:8d:23:7f:83:af:dd:a7: f7:cb:29:36:de:0a:5b:c3:61:09:f3:74:3c:7f:55: ea:a4:0e:07:b1:bb:48:d7:46:13:db:93:85:eb:e3: d9:48:de:a0:84:9b:4f:aa:27:cc:8f:2e:2d:87:9c: 9d:9b:2b:af:52:05:b2:a3:82:45:ac:98:83:48:77: 5d:8f:13:59:2a:3b:58:21:6f:58:25:d2:1b:50:e8: 11:d9:43:60:4d:5f:2a:6f:71:37:c4:9c:f0:fd:86: 96:a5:29:d8:b1:a6:47:33:26:22:29:54:d4:4c:23: 11:ae:58:7f:7f:63:13:7b:01:39:c2:a4:37:fb:3b: d4:26:14:75:fd:a7:d1:4d:af:1e:d0:8e:a2:99:bc: 54:1f:a4:ff:dc:79:d8:b8:3b:2f:ba:bc:e6:ee:5d: 84:6f:81:f1:5a:a1:a0:e6:97:b6:75:12:cd:8d:c0: af:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:10:AC:E5:B2:64:F6:9E:24:F5:8A:B0:AE:52:A6:F6:A5:1B:2A:D9 X509v3 Authority Key Identifier: keyid:27:2D:71:AD:62:64:57:75:CC:DF:BB:57:70:47:8E:59:43:EA:65:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Jy1xrWJkV3XM37tXcEeOWUPqZZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6DBD/F9C0E11E790911EE99EDD11FC4F9AE02/Jy1xrWJkV3XM37tXcEeOWUPqZZU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:4a:28:7a:a1:5b:61:7a:a2:60:5c:df:ed:4c:26:57:0a:5d: 20:d7:61:7b:b4:5e:f4:cd:c2:5f:74:0f:a9:81:7f:da:ea:f3: 58:b1:e5:3f:d8:04:67:fd:0d:0c:13:79:da:22:fa:c0:70:9b: 10:42:b0:d9:6f:66:eb:9c:d2:e8:72:d2:40:9d:75:f6:f5:69: 02:97:c6:8e:a7:8a:40:9c:8e:90:19:06:98:3b:02:7d:e3:7a: 46:fd:d6:ca:17:e7:c2:80:3e:6e:a5:e1:ab:90:fb:a1:3f:2e: e0:ab:90:5e:aa:a7:1f:cc:c1:59:6d:67:ce:e8:a0:40:ed:2c: 87:16:7b:87:40:58:f8:b8:de:84:f4:3e:8b:ec:ee:93:6f:34: 4a:52:d5:9f:2a:bf:fc:28:71:be:c1:f3:1f:12:de:a3:60:29: f5:55:31:8d:22:89:f6:8e:b3:e6:ba:2d:90:3d:00:4d:2f:42: 55:c3:44:41:96:b5:2b:d8:14:e1:1f:6c:c6:89:79:6a:72:84: 85:fb:37:c6:b9:19:80:00:85:36:70:be:e6:64:3f:69:30:7d: 3c:15:20:06:db:10:d3:04:ab:97:72:f9:1c:b0:85:bd:64:b3: dc:da:2e:a5:f5:1e:b5:ac:ba:3e:08:74:07:e1:2f:f8:9a:26: 9c:00:1f:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZEQkQxMTAvBgNVBAUTKDI3MkQ3MUFENjI2NDU3NzVDQ0RGQkI1NzcwNDc4RTU5 NDNFQTY1OTUwHhcNMjUwODA1MDQ0MjQ1WhcNMjUwODEyMDQ0MjQ1WjAYMRYwFAYD VQQDEw02ODkxOGJjNS03YmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjyMMHSX3YUBQCU4yZW32NXQCzyjovjaOxHjAVvhVi7yPYiK9KV3ohEFaTXT jABiEyXRJOGK/j5p9SOeJ9njEywc1feFn0gZc70iOdv5s7xsgI0jf4Ov3af3yyk2 3gpbw2EJ83Q8f1XqpA4HsbtI10YT25OF6+PZSN6ghJtPqifMjy4th5ydmyuvUgWy o4JFrJiDSHddjxNZKjtYIW9YJdIbUOgR2UNgTV8qb3E3xJzw/YaWpSnYsaZHMyYi KVTUTCMRrlh/f2MTewE5wqQ3+zvUJhR1/afRTa8e0I6imbxUH6T/3HnYuDsvurzm 7l2Eb4HxWqGg5pe2dRLNjcCvEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAQrOWy ZPaeJPWKsK5SpvalGyrZMB8GA1UdIwQYMBaAFCctca1iZFd1zN+7V3BHjllD6mWV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkRCRC9GOUMwRTExRTc5 MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1YzWE0zN3RYY0VlT1dVUHFa WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0p5MXhyV0prVjNYTTM3dFhjRWVPV1VQcVpaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkRCRC9GOUMwRTExRTc5MDkxMUVFOTlFREQxMUZDNEY5QUUwMi9KeTF4cldKa1Yz WE0zN3RYY0VlT1dVUHFaWlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjSih6oVtheqJgXN/tTCZXCl0g12F7tF70zcJfdA+pgX/a6vNYseU/ 2ARn/Q0ME3naIvrAcJsQQrDZb2brnNLoctJAnXX29WkCl8aOp4pAnI6QGQaYOwJ9 43pG/dbKF+fCgD5upeGrkPuhPy7gq5BeqqcfzMFZbWfO6KBA7SyHFnuHQFj4uN6E 9D6L7O6TbzRKUtWfKr/8KHG+wfMfEt6jYCn1VTGNIon2jrPmui2QPQBNL0JVw0RB lrUr2BThH2zGiXlqcoSF+zfGuRmAAIU2cL7mZD9pMH08FSAG2xDTBKuXcvkcsIW9 ZLPc2i6l9R61rLo+CHQH4S/4miacAB+8 -----END CERTIFICATE-----Generated at Thu Aug 7 04:29:37 2025 by rpki-client